Thanks for all these stale style bugs, miaubiz. We think we've got a good defense now to making these stale style bugs unexploitable, but we'll pay $1000 per well-reported bug up until that point. $1000 for this one. Forgive the brevity on upcoming rewards :)
----
Boilerplate text:
Please do NOT publicly disclose details until a fix has been released to all our
users. Early public disclosure may cancel the provisional reward.
Also, please be considerate about disclosure when the bug affects a core library
that may be used by other products.
Please do NOT share this information with third parties who are not directly
involved in fixing the bug. Doing so may cancel the provisional reward.
Please be honest if you have already disclosed anything publicly or to third parties.
----